qs Security Advisories - Npm | Ecosyste.ms: Advisories

qs

A querystring parser that supports nesting and arrays, with a depth limit

View on github.com · View on npmjs.org

Security Advisories for qs in npm

Moderate

3 months ago

qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set GSA_kwCzR0hTQS1xOG1qLW03Y3AtNXEyNs4ABXQl

npm qs

Low

6 months ago

qs's arrayLimit bypass in comma parsing allows denial of service GSA_kwCzR0hTQS13N2Z3LW1qd3gtdzg4M84ABSSg

npm qs

Moderate

7 months ago

qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion GSA_kwCzR0hTQS02cnc3LXZweG0tNDk4cM4ABQaB

npm qs

High

over 3 years ago

qs vulnerable to Prototype Pollution GSA_kwCzR0hTQS1ocnBwLWg5OTgtajNwcM4AAwDM

npm qs

High

over 6 years ago

Prototype Pollution Protection Bypass in qs MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWdxZ3YtNmpxNS1qamo5

npm qs

High

almost 8 years ago

Denial-of-Service Extended Event Loop Blocking in qs MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWY5Y20tcDN3Ni14dnIz

npm qs

High

almost 9 years ago

Denial-of-Service Memory Exhaustion in qs MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpqdjctcXB4My1oNjJx

npm qs

Filter by Severity

High 4 Moderate 2 Low 1